Contact Form by Bit Form Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Contact Form by Bit Form plugin for WordPress, affecting all versions through 2.17.4. The issue arises from inadequate directory listing prevention and the absence of file name randomization, which enables unauthenticated attackers to access sensitive data, including files uploaded via forms. This vulnerability was partially addressed in version 2.17.5.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, including files uploaded through the contact forms.

Remediation

Users are advised to update the Contact Form by Bit Form plugin to version 2.17.6 or a newer patched version.